Project Security Lead

Job Title: Project Security Lead

Location: Remote - Occasional Travel to South Dakota as Required

Contract

Responsibilities

• Lead security governance and certification activities for the project.
• Review application, data, API, integration, and Microsoft Azure architecture for security compliance.
• Oversee Identity and Access Management, including OAuth 2.0, OpenID Connect, SSO, MFA, and RBAC.
• Support data security, privacy, encryption, and secure data handling.
• Coordinate vulnerability scanning, penetration testing, remediation, and retesting.
• Support secure software development and security testing throughout the SDLC.
• Define security logging, monitoring, incident response, and audit requirements.
• Review Artificial Intelligence and Generative AI security and compliance requirements where applicable.
• Lead production security readiness and provide required security certification evidence.
• Prepare and maintain security documentation, risk registers, testing results, and compliance artifacts.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or related discipline, or equivalent professional experience.
• Experience in information security, cybersecurity, application security, cloud security, or security architecture.
• Experience securing cloud-based enterprise applications, preferably Microsoft Azure.
• Experience with secure software development lifecycle practices.
• Knowledge of OAuth 2.0, OpenID Connect, SSO, MFA, RBAC, encryption, secrets management, audit logging, vulnerability management, and incident response.
• Experience coordinating security testing, vulnerability remediation, and retesting.
• Understanding of OWASP Top Ten, CVEs, and secure coding principles.
• Strong written communication and security documentation skills.

Preferred Qualifications

• 7+ years of information security or cybersecurity experience.
• State, Local, and Education government technology experience.
• Healthcare, Medicaid, public health, or other regulated-environment experience.
• Microsoft Azure security experience.
• Experience with government security assessments and production authorization.
• Familiarity with NIST security frameworks and HIPAA security requirements.
• Relevant security certifications such as CISSP, CISM, CCSP, or Microsoft Azure Security Engineer Associate.